[ULOGD PATCH 0/6] rework mac address related issues

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

This is a rewrite of my previous patchset following your suggestion to modify
input plugins instead of adding options the filter plugin.

The patches:
 "Specify that NFLOG only return mac saddr."
 "Output mac.saddr and mac.daddr in ULOG plugin."
modify the INPUT plugins to have them use raw.mac.saddr and raw.mac.daddr
fields. NFLOG code is trivial but ULOG patch is more difficult because ULOG
manually parses the hardware header to extract source and destination
addresses. This has raise the necessity to have an option to specify the length
of an hardware address in this plugin. The option is set by default to 6 which
is the default for almost all sort of interfaces.

Parsing in ULOG is completed by the patch:
 "Parse oob protocol in ULOG when possible."
It make ULOG parse the end of the hardware header to extrac the protocol.

The patch "Adapt MAC2STR to NFLOG and ULOG input key change." is a simple
adaptation of MAC2STR plugin to the new keys.

Last two patches:
 "Add destination mac_addr to database."
 "Sync PRINTPKT with mac modification."
sync output plugins with these modifications.

Patchset statistics:
 doc/mysql-ulogd2.sql              |   32 ++++++++++-------
 doc/pgsql-ulogd2.sql              |   17 +++++++--
 filter/ulogd_filter_MAC2STR.c     |   69 +++++++++++++++++++++++++-----------
 include/ulogd/printpkt.h          |    3 +-
 input/packet/ulogd_inppkt_NFLOG.c |   10 +++---
 input/packet/ulogd_inppkt_ULOG.c  |   48 +++++++++++++++++++------
 util/printpkt.c                   |   26 +++++++++++---
 7 files changed, 143 insertions(+), 62 deletions(-)

BR,
--
Eric Leblond
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux